North Korean attackers use malicious blogs to deliver malware to high-profile South Korean targets

ThaiCERT Threat Group Cards

North Korean attackers use malicious blogs to deliver malware to high-profile South Korean targets https://blog.talosintelligence.com/2021/11/kimsuky-abuses-blogs-delivers-malware.html

Cisco Talos blog

Cisco Talos recently discovered a campaign operated by the North Korean Kimsuky APT group delivering malware to high-value South Korean targets — namely geopolitical and aerospace research agencies. This campaign has been active since at least June 2021 deploying a constantly evolving set of implants derived from the Gold Dragon/Brave Prince family of implants.

Hackmageddon cyber attacks timelines (Paolo Passeri)

Researchers from Cisco Talos reveal the details of the latest campaign of the Kimsuky APT targeting think tanks in the South through malware-laden blog posts. [Date Occurred: Since June 2021; Date Discovered: -]

North Korean attackers use malicious blogs to deliver malware to high-profile South Korean targets